Testing authorisation

Before active testing, ByteAssure records the authorised customer, targets, time window, permitted techniques, excluded systems, emergency contact and stop conditions. Third-party infrastructure is excluded unless the customer can show authority.

Safe defaults

• No destructive testing, denial of service or social engineering unless explicitly scoped
• No persistence or unnecessary access to real customer data
• Stop and notify on unexpected material risk
• Record sufficient evidence without collecting unnecessary data